Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/pgMAK49_uCUIssEIL4H9ZqoDJtU.roa
File:                     pgMAK49_uCUIssEIL4H9ZqoDJtU.roa (raw, json)
Hash identifier:          HsrflGNL6spfVru9pLZBziZEdIdy3/GslMXXhxQbYrI=
Subject key identifier:   A6:03:00:2B:8F:7F:B8:25:08:B2:C1:08:2F:81:FD:66:AA:03:26:D5
Certificate issuer:       /CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
Certificate serial:       04
Authority key identifier: BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/pgMAK49_uCUIssEIL4H9ZqoDJtU.roa
Signing time:             Thu 27 May 2021 05:07:21 +0000
ROA not before:           Thu 27 May 2021 05:07:21 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     4808
IP address blocks:        211.155.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
        Validity
            Not Before: May 27 05:07:21 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A603002B8F7FB82508B2C1082F81FD66AA0326D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:52:cc:d8:56:e5:87:17:87:97:60:7e:c8:
                    ea:69:70:58:6a:f4:62:71:c9:13:7f:e6:6f:b0:03:
                    e5:ee:31:c9:47:8b:0b:cf:10:f9:04:56:6b:45:b2:
                    b4:04:95:89:30:1b:e7:a8:95:03:15:d3:fd:56:75:
                    cc:28:80:98:21:7f:a8:fe:f7:5f:d1:72:ea:50:6c:
                    a3:42:37:fd:f2:e8:56:d7:3d:a4:46:5d:8d:cd:91:
                    5b:05:74:7b:c0:71:ce:ee:f1:9e:f7:60:5f:30:a4:
                    ed:fb:e4:f3:e2:53:db:c5:51:95:88:b7:e5:78:59:
                    03:04:f1:6b:3e:5f:37:0f:ea:c0:05:79:ca:f3:8a:
                    d9:f5:4f:19:90:f4:c5:fd:d8:fe:c7:44:33:37:cf:
                    cb:ad:cb:95:a8:c6:b5:fa:67:95:44:f1:a0:5d:99:
                    bc:85:59:79:7b:a6:ca:06:02:66:fb:47:89:c9:af:
                    6b:e0:62:71:78:c5:01:c6:c6:6d:16:ed:e2:2c:8c:
                    88:a7:34:0e:8b:ff:56:42:54:85:3e:0e:be:55:4e:
                    57:ca:7f:54:4c:04:f7:de:9f:0f:44:06:b8:76:27:
                    cd:0d:a0:1c:00:b8:1f:b3:63:56:58:fa:dc:ac:c9:
                    38:34:46:a0:4e:8d:85:67:00:78:42:1b:87:51:57:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:00:2B:8F:7F:B8:25:08:B2:C1:08:2F:81:FD:66:AA:03:26:D5
            X509v3 Authority Key Identifier:
                keyid:BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/vuAG4i4pZInVRgq4s_6Zi5dHWl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/pgMAK49_uCUIssEIL4H9ZqoDJtU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:55:aa:a9:2a:34:2b:10:3e:6e:ce:2a:41:39:02:57:81:
         b3:44:7e:4c:3b:f8:0c:77:11:23:87:c2:8f:c3:84:9a:77:14:
         68:7d:77:42:d5:f1:b3:75:a6:dd:13:e8:df:77:11:07:8f:1f:
         87:63:63:fd:9d:62:53:a8:82:09:58:61:dc:83:6d:17:39:5d:
         86:3e:e8:50:fc:4e:0a:a1:94:37:06:9f:50:5c:8b:63:83:ae:
         4c:65:06:c5:18:aa:19:1f:ff:84:3b:e0:98:e1:d9:c7:05:01:
         d5:18:3a:a4:88:1c:51:0e:a7:11:7c:9c:66:a4:ad:0e:db:6f:
         20:9a:86:c4:8a:73:64:f6:ea:99:fd:bc:ca:39:61:f8:7f:45:
         fb:30:c4:88:06:8a:4d:0f:43:85:f3:e9:a5:f7:a0:ae:50:7a:
         43:63:45:c4:d3:c7:14:df:58:ad:76:c3:9a:2c:60:73:9a:1d:
         1a:2f:f8:b1:bd:dd:50:a2:33:af:49:92:0b:13:f6:9c:2d:92:
         51:49:20:a2:fc:42:87:a3:33:37:e5:bc:83:72:31:54:d7:ea:
         30:4c:e5:b6:0a:b5:2b:f5:af:1d:38:56:f8:c5:d1:e7:16:4a:
         97:c8:d2:c4:96:a8:a2:b3:1b:88:ff:c3:3e:63:2c:25:74:45:
         da:11:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----